70-646 testinsides

Microsoft 70-646

Pro: Windows Server 2008, Server AdministratorVersion: Demo 63.2

Topic 1, Fabrikam Inc Scenario COMPANY OVERVIEW Fabrikam Inc. is a manufacturing company that has a main office and a branch office. PLANNED CHANGES You plan to deploy a failover cluster named Cluster1 in the branch office. Cluster1 will beconfigured to meet the following requirements: • The cluster will host eight virtual machines (VMs). • The cluster will consist of two nodes named Node1 and Node2. • The quorum mode for the cluster will be set to Node and Disk Majority. • A user named Admin1 will configure the virtual switch configuration of the VMs. • The cluster nodes will use shared storage on an iSCSI Storage Area Network (SAN). You plan to configure a VM named File2 as a file server. Users will store confidential files on File2. You plan to deploy a Microsoft Forefront Threat Management Gateway (TMG) server in each site.The Forefront TMG server will be configured as a Web proxy. EXISTING ENVIRONMENT The research department is located in the branch office. Research users frequently travel to themain office. Existing Active Directory/Directory Services The network contains a single-domain Active Directory forest named fabrikam.com. The functionallevel of the forest is Windows Server 2008. The relevant organizational units (OUs) for the domain are configured as shown in the followingtable.

Microsoft 70-646 Exam

"Ensure Success with Money back Guarantee" - Testinsides.com 2

The relevant sites for the network are configured shown in the following table.

The relevant group policy objects (GPOs) are configured as shown in the following table.

Existing Network Infrastructure All users run windows server 2008 R2. The relevant servers are configured as shown in followingtable.

WSUS2 is configured as a downstream replica server. File1 contains a share named Templates. Users access the Templates share by using the path\\fabrikam.com\dfs\templates.



File1 has the Distributed File System (DFS) Replication role service and the DFS Namespacesrole service installed. TECHNICAL REQUIREMENTS Fabrikam must meet the following requirements: • Minimize the cost of IT purchases. • Minimize the potential attack surface on the servers. • Minimize the number of rights assigned to administrators. • Minimize the number of updates that must be installed on the servers. • Ensure that Internet Explorer uses the local ForeFront TMG server to connect to the Internet. • Ensure that all client computers continue to receive updates from WSUS if a WSUS server fails. • Prevent unauthorized users from accessing the data stored on the VMs by making offline copiesof the VM files. Fabrikam must meet the following requirements for the Templates share: • Ensure that users access the files in the Templates share from a server in their local site. • Ensure that users always use the same UNC path to access the Templates share, regardless ofthe site in which the users are located,

QUESTION NO: 1 You need to configure Windows Update to meet the company's technical requirements. What should you do? A. Configure WSUS2 as an autonomous server. B. Create a Network Load Balancing (NLB) cluster. C. Create multiple Host (A) records and use round robin DNS. D. Configure multiple service location (SRV) records and use round robin DNS.

Answer: B

Explanation:



Topic 2, School of Fine Art Scenario COMPANY OVERVIEW School of Fine Art is an educational institution that has a main campus and two satellitecampuses. The main campus is located in New York. The satellite campuses are located in LosAngeles and Chicago. The main campus has approximately 4,000 users made up of students,faculty, and employees. Each satellite campus has approximately 1,000 users made up ofstudents, faculty, and employees. EXISTING ENVIRONMENT The network contains a single Active Directory domain named ftneartschool.net. All servers run Windows Server 2008 R2. All client computers run either Windows XP or Windows7. The network contains Microsoft Application Virtualization (App-V) and Microsoft EnterpriseDesktop Virtualization (MED-V). Existing Network Infrastructure The main campus has the following servers: • A file server that contains confidential files • A print server that has several printers installed • A server that has the Windows Server Update Services (WSUS) server role installed All client computers are updated by using the WSUS server. The main campus has a computer lab. The lab has 50 client computers that run Windows 7Enterprise. The computer accounts for the lab computers are located in an organizational unit (OU) namedLabOU. The user accounts and computer accounts for all of the students are located in an OUnamed StudentsOU. Both OUs are child objects in the fineartschool.net domain.



The relevant Group Policy objects (GPOs) are configured as shown in the following table.

REQUIREMENTS Technical Requirements The computer lab must meet the following requirements: • Ensure that the user settings in all domain-level GPOs are applied to each student. • Prevent the settings in all domain-level GPOs from being applied to the client computers in thecomputer lab. The update management infrastructure must meet the following requirements: • Each campus must control the updates for its respective campus. • Update status reports must be sent weekly to the Enterprise Administrator on the main campus. Application Requirements All client computers will be upgraded to Windows 7 Enterprise. An application named App1 runs on every client computer. App1 is only compatible with WindowsXP. App1 must remain available after all of the operating system upgrades are complete. App1 must meet the following requirements: • App1 must be available from the Start menu. • The management of App1 must be centralized. • Each user must have a unique instance of Appl. Security Requirements Security for the file server on the main campus must meet the following requirements: • Unauthorized users must be prevented from printing sensitive files stored on the server.



• The contents of the server* s hard disks must remain secure if the physical security of the serveris compromised. Problem Statements Users report that they receive a different desktop environment every time they log on to a clientcomputer in the computer lab. The print server on the main campus has reliability issues. A malfunction on a single printer oftencauses other printers to malfunction.

QUESTION NO: 2 You need to recommend changes to the existing environment that meet the company's securityrequirements for the file server on the main campus. What should you recommend? A. Deploy Network Policy Server (NPS) and create a network policy. B. Deploy Print and Document Services and create a custom printer filter. C. Deploy File Server Resource Manager (FSRM) and create a file classification rule. D. Deploy Active Directory Rights Management Services (AD RMS) and create an AD RMS rightspolicy template.

Answer: D

Explanation:

Topic 3, Mixed Questions

QUESTION NO: 3 Your network consists of a single Active Directory domain. All servers run Windows Server 2008R2. A server named Server1 has the Remote Desktop Services server role installed. You noticethat several users consume more than 30 percent of the CPU resources throughout the day. Youneed to prevent users from consuming more than 15 percent of the CPU resources.Administrators must not be limited by the amount of CPU resources that they can consume. What should you do?



A. Implement Windows System Resource Manager (WSRM), and configure user policies. B. Implement Windows System Resource Manager (WSRM), and configure session policies. C. Configure Performance Monitor, and create a userdefined Data Collector Set. D. Configure Performance Monitor, and create an Event Trace Session Data Collector Set.

Answer: A

Explanation:

QUESTION NO: 4 Your network consists of a single Active Directory forest. The sales department in your companyhas 600 Windows Server 2008 R2 servers. You need to recommend a solution to monitor theperformance of the 600 servers. Your solution must meet the following requirements: ·Generate alerts when the average processor usage is higher than 90 percent for 20 minutes. ·Automatically adjust the processor monitoring threshold to allow for temporary changes in theworkload. What should you recommend? A. Install Windows System Resource Manager (WSRM) on each server. B. Deploy Microsoft System Center Operations Manager (OpsMgr). C. Deploy Microsoft System Center Configuration Manager (SysMgr). D. Configure Reliability and Performance Monitor on each server

Answer: B

Explanation:

Topic 4, Lucerne Publishing Scenario: COMPANY OVERVIEW Overview Lucerne Publishing is a large publishing company that produces both traditional books and e-books.



----

Physical Location The company has a main office and a branch office. The main office is located in New York. Thebranch office is located in San Francisco. The main office has a satellite office located in Boston.The company has 7,500 users. EXISTING ENVIRONMENT Active Directory Environment The network contains an Active Directory forest. The forest contains a single domain namedlucernepublishing.com. Network Infrastructure Client computers in the New York office and the San Francisco office run either Windows Vista orWindows XP. All client computers in the Boston office run Windows 7. The company has a finance department. All of the client computers in the finance department runWindows XP. The finance department uses an application named Appl. Appl only runs onWindows XP. The relevant servers in the New York office are configured as shown in the following table.

The servers have the following configurations:

Remote Desktop is enabled on all servers. The passwords for all service accounts are set to never expire. Serverl stores roaming user profiles for users in the Boston office. SQL1 and SQL2 are deployed in a two-node failover cluster named Clusterl.



--

-------

-

-

All servers have Pre-Boot Execution Environment (PXE)-compliant network adapters. The servers in the San Francisco office contain neither a recovery partition nor optical mediadrives. DFSl and DFS2 are members of the same DFS Replication group. The DFS namespaceis configured to use Windows 2000 Server mode.

The Boston office has no servers. The Boston office connects to the New York office by using adedicated hardware VPN device. The finance department publishes monthly forecast reports that are stored in DFS. REQUIREMENTS Business Goals Lucerne Publishing must minimize administrative costs, hardware costs, software costs, anddevelopment costs, whenever possible. Planned Changes All client computers will be upgraded to Windows 7. A VPN server will be deployed in the main office. All VPN clients must have the latest Windowsupdates before they can access the internal network. You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role serviceinstalled. Technical Requirements Lucerne Publishing must meet the following technical requirements:

Upgrade all client computers to Windows 7. Minimize Group Policy-related replication traffic. Ensure that Appl can be used from client computers that run Windows 7. Ensure that users can use Appl when they are disconnected from the network. Ensure that you can perform a bare metal recovery of the servers in the San Francisco office. Minimize the amount of time it takes users in the Boston office to log on to their client computers. Ensure that domain administrators can connect remotely to all computers in the domain throughRD Gateway. Ensure that file server administrators can access DFS servers and file servers through the RDGateway. Prevent file server administrators from accessing other servers through the RD Gateway Prevent file server administrators from accessing other servers through the RD Gateway

Security Requirements



Lucerne Publishing must meet the following security requirements: • USB storage devices must not be used on any servers. • The passwords for all user accounts must be changed every 60 days. • Users must only be able to modify the financial forecast reports on DFSl. DFS2 must contain aread-only copy of the financial forecast reports. • All operating system drives on client computers that run Windows 7 must be encrypted. • Only approved USB storaqe devices must be used on client computers that run Windows 7.

QUESTION NO: 5 You are planning to upgrade the operating systems of the client computers in the financedepartment. You need to recommend a solution for App1 that meets the company's technicalrequirements. What should you include in the recommendation? A. Microsoft Application Virtualization (AppV) B. RemoteApp and Desktop Connection C. RD Gateway D. Windows XP Mode

Answer: D

Explanation:


QUESTION NO: 6 Your network is configured as shown in the following diagram.



You deploy an enterprise certification authority (CA) on the internal network. You also deploy aMicrosoft Online Responder on the internal network. You need to recommend a secure method forInternet users to verify the validity of individual certificates. The solution must minimize network bandwidth. What should you recommend? A. Deploy a subordinate CA on the perimeter network. B. Install a standalone CA and the Network Device Enrollment Service (NDES) on a server on theperimeter network. C. Install a Network Policy Server (NPS) on a server on the perimeter network. Redirectauthentication requests to a server on the internal network. D. Install Microsoft Internet Information Services (IIS) on a server on the perimeter network.Configure IIS to redirect requests to the Online Responder on the internal network.

Answer: D

Explanation:

Topic 5, Woodgrove Bank Scenario: COMPANY OVERVIEW Overview Woodgrove Bank is an international financial organization. Physical Location The company has a main office and multiple branch offices. EXISTING ENVIRONMENT Active Directory Environment The network contains one Active Directory forest. A separate domain exists for each office. Network Infrastructure



All offices have domain controllers that are configured as DNS servers. All client computers areconfigured to connect to the DNS servers in their respective office only. The main office has the following servers and client computers: • One Windows Server Update Services (WSUS) server. • Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7. • Ten file servers that host multiple shared folders. The file servers run either Windows Server2003 or Windows Server 2008 R2. • One domain-based Distributed File System (DFS) namespace that has two replicas. The DFSservers run Windows Server 2008 R2. The DFS namespace is configured to use Windows 2000Server mode. Each branch office has a WAN link to the main office. The WAN links are highly saturated. Eachoffice has a dedicated high-speed Internet connection. All of the client computers in the branch offices run Windows 7. User Problems Users report that it is difficult to find the shared folders on the network. REQUIREMENTS Planned Changes Woodgrove Bank plans to implement the following changes: • Deploy a new application named Appl on each client computer. Appl has a Windows Installerpackage and is compatible with Windows XP, Windows Vista, and Windows 7. • Designate a user in each office to manage the address information of the user accounts in thatoffice. • Deploy a new branch office named Branch22 that has the following servers: o One file server named Serverl. o Two domain controllers named DC10 and DC11 that are configured as DNS servers. Technical Requirements



Woodgrove Bank must meet the following technical requirements: • Minimize hardware and software costs, whenever possible. • Encrypt all DNS replication traffic between the DNS servers. • Ensure that users in the branch offices can access the DFS targets if a WAN link fails. • Ensure that users can only view the list of DFS targets to which they are assigned permissions. • Minimize the amount of network traffic between the main office and the branch offices, wheneverpossible. • Minimize the amount of name resolution traffic from the branch offices to the DNS servers in themain office. • Ensure that the administrators in the main office manage all Windows update approvals and allcomputer groups. • Manage all of the share permissions and the folder permissions for the file servers from a singlemanagement console. • Ensure that if a file on a file server is deleted accidentally, users can revert to a previous versionof the file without administrator intervention. • Ensure that administrators are notified by e-mail each time a user successfully copies a file thathas an .avi extension to one of the file servers. Security Requirements Woodgrove Bank must meet the following security requirements: • Access rights and user rights must be minimized. • The Guest account mustoe disabled on all servers. • Internet Information Services (IIS) must only be installed on authorized servers.

QUESTION NO: 7 You need to recommend changes to the network that address the user problems statement. What should you recommend? A. Deploy DirectAccess. B. Configure folder redirection. C. Create a volume mount point.



D. Implement additional DFS targets.

Answer: D

Explanation:


QUESTION NO: 8 Your company has a main office and a branch office. Your network contains a single ActiveDirectory domain. An Active Directory site exists for each office. All domain controllers run Windows Server 2008 R2.You plan to modify the DNS infrastructure. You need to plan the new DNS infrastructure to meetthe following requirements: ·Ensure that the DNS service is available even if a single server fails ·Encrypt the synchronization data that is sent between DNS servers ·Support dynamic updates to all DNS servers What should you include in your plan? A. Install the DNS Server server role on two servers. Create a primary zone on the DNS server inthe main office. Create a secondary zone on the DNS server in the branch office. B. Install the DNS Server server role on a domain controller in the main office and on a domaincontroller in the branch office. Configure DNS to use Active Directory integrated zones. C. Install the DNS Server server role on a domain controller in the main office and on a ReadonlyDomain Controller (RODC) in the branch office. Configure DNS to use Active Directory integratedzones. D. Install the DNS Server server role on two servers. Create a primary zone and a GlobalNameszone on the DNS server in the main office. Create a GlobalNames zone on the DNS server in thebranch office.

Answer: B

Explanation:



Topic 6, City Power & Light Scenario: COMPANY OVERVIEW Overview City Power & Light is an international utilities company. The company has a sales department, afinance department, and a production department. Physical Location The company has a main office and a branch office. EXISTING ENVIRONMENT Network Infrastructure The network contains the following servers: • A server named Serverl that runs Windows Server 2008 R2 Enterprise and has the Hyper-V roleinstalled. Serverl hosts three virtual machines (VMs) that run Windows Server 2008 R2 Enterprise.The VMs always run. • A Windows Server Update Services (WSUS) server in the main office. The WSUS servermanages updates for the client computers in the main office only. • Several file servers that store data on an iSCSI Storage Area Network (SAN). The file servershave multiple network cards. • An enterprise root certification authority (CA) named CA1 that runs Windows Server 2008 R2. The branch office connects to the main office by using a WAN link. The WAN link is highlysaturated. All client computers on the network connect to the Internet by using a single Internetconnection at the main office. Problem Statements All client computers run Microsoft Office 2003. The client computers for the users in the salesdepartment run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit version ofOffice 2010 and Office 2003 concurrently when they work offline. Office 2010 must be deployed byusing the minimum amount of administrative effort.



REQUIREMENTS Business Goal City Power & Light has the following business goals: • Software and hardware costs must be minimized, whenever possible. • Due to power restrictions at the data center in the main office, all new servers must be deployedon VMs, whenever possible. Planned Changes City Power & Light plans to implement the following changes in their network: • A WSUS server in the branch office. • A robotic-based tape library for the file servers. • A document management system that supports the following requirements: o Retains multiple versions of a document o Automatically applies access policies to documents • A solution for managing Group Policy objects (GPOs) that supports the following: o Version tracking o Offline modification o Role-based access control • Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run concurrently. • Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster will beattached to a hardware RAID-5 array that has five 2-terabyte drives. • Five additional physical servers for the finance department. The new servers will use native-bootvirtual hard disks (VHDs). The VHD images will contain a single partition. Technical Reguirements City Power & Light must meet the following technical requirements: • The file servers must maintain their connection to the SAN if a network card fails. • The bandwidth utilization between the main office and the branch office must be minimized.



• Administrators in the main office must approve or reject updates for all of the client computers inall of the offices. Security Reguirements City Power & Light must meet the following security requirements: • All help desk technicians must be able to approve certificate requests and revoke certificates.The help desk technicians must be prevented from modifying the properties ofthe CA. • All telecommunications technicians must be able to manage the virtual networks of Serverl. Thetelecommunications technicians must be prevented from performing all other Hyper-Vmanagement task. • All of the documents created by users in the finance department must be shared with all of themanagers in the company. After 30 days, only those who created the documents must be able toaccess the documents.

QUESTION NO: 9 You need to deploy a WSUS server in the branch office that meets the company's technicalrequirements. What should you deploy? A. an autonomous WSUS server that is configured to download updates from Microsoft Update B. an autonomous WSUS server that is configured to download updates from the WSUS server inthe main office C. a WSUS server running in replica mode that is configured to download updates from MicrosoftUpdate D. a WSUS server running in replica mode that is configured to download updates from the WSUSserver in the main office

Answer: D

Explanation:

Topic 4, Lucerne Publishing Scenario: COMPANY OVERVIEW Overview



-

Lucerne Publishing is a large publishing company that produces both traditional books and e-books. Physical Location The company has a main office and a branch office. The main office is located in New York. Thebranch office is located in San Francisco. The main office has a satellite office located in Boston.The company has 7,500 users. EXISTING ENVIRONMENT Active Directory Environment The network contains an Active Directory forest. The forest contains a single domain namedlucernepublishing.com. Network Infrastructure Client computers in the New York office and the San Francisco office run either Windows Vista orWindows XP. All client computers in the Boston office run Windows 7. The company has a finance department. All of the client computers in the finance department runWindows XP. The finance department uses an application named Appl. Appl only runs onWindows XP. The relevant servers in the New York office are configured as shown in the following table.

The servers have the following configurations:

Remote Desktop is enabled on all servers.



-----

-------

-

-

The passwords for all service accounts are set to never expire. Serverl stores roaming user profiles for users in the Boston office. SQL1 and SQL2 are deployed in a two-node failover cluster named Clusterl. All servers have Pre-Boot Execution Environment (PXE)-compliant network adapters. The servers in the San Francisco office contain neither a recovery partition nor optical mediadrives. DFSl and DFS2 are members of the same DFS Replication group. The DFS namespaceis configured to use Windows 2000 Server mode.

The Boston office has no servers. The Boston office connects to the New York office by using adedicated hardware VPN device. The finance department publishes monthly forecast reports that are stored in DFS. REQUIREMENTS Business Goals Lucerne Publishing must minimize administrative costs, hardware costs, software costs, anddevelopment costs, whenever possible. Planned Changes All client computers will be upgraded to Windows 7. A VPN server will be deployed in the main office. All VPN clients must have the latest Windowsupdates before they can access the internal network. You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role serviceinstalled. Technical Requirements Lucerne Publishing must meet the following technical requirements:

Upgrade all client computers to Windows 7. Minimize Group Policy-related replication traffic. Ensure that Appl can be used from client computers that run Windows 7. Ensure that users can use Appl when they are disconnected from the network. Ensure that you can perform a bare metal recovery of the servers in the San Francisco office. Minimize the amount of time it takes users in the Boston office to log on to their client computers. Ensure that domain administrators can connect remotely to all computers in the domain throughRD Gateway. Ensure that file server administrators can access DFS servers and file servers through the RDGateway. Prevent file server administrators from accessing other servers through the RD Gateway



Prevent file server administrators from accessing other servers through the RD Gateway Security Requirements Lucerne Publishing must meet the following security requirements: • USB storage devices must not be used on any servers. • The passwords for all user accounts must be changed every 60 days. • Users must only be able to modify the financial forecast reports on DFSl. DFS2 must contain aread-only copy of the financial forecast reports. • All operating system drives on client computers that run Windows 7 must be encrypted. • Only approved USB storaqe devices must be used on client computers that run Windows 7.

QUESTION NO: 10 You need to recommend a solution for the USB storage devices on the client computers. Thesolution must meet the company's security requirements. What should you include in the recommendation? A. Encrypted File System (EFS) B. the AppLocker Group Policy settings C. the Enhanced Storage Access settings D. Windows BitLocker Drive Encryption (BitLocker)

Answer: C

Explanation:



Documents

70-646 testinsides